A director is halfway through a board meeting when the agenda reaches a supplier contract. Then it clicks. One of the shortlisted suppliers is partly owned by a sibling. Nothing improper may have happened, but the room has changed. If that relationship isn't declared and managed properly, the decision may be questioned later, even if the supplier is objectively the best option.

By Panbo Ye, CFP® | FCPA | SSA® | Founder, Everglow

Who this article is for: business owners, NFP directors, medical professionals, advisers, AFSL operators, and Chinese enterprises or new migrants building governance settings in Australia.

A sound conflicts of interest policy isn't about assuming people are dishonest. It's about accepting that business, family, ownership, and professional judgment often overlap, then giving people a clear way to identify, declare, assess, and manage those overlaps before they distort a decision. In Australia, that preventive mindset matters. It's one reason governance frameworks now treat conflicts as a routine risk to be documented and handled, not an embarrassing exception. If your organisation still relies on goodwill and memory, the policy is doing too little. A better approach is to make disclosure normal, assessment structured, and outcomes recorded. That's how a policy protects both the organisation and the individual decision-maker. If you need broader context on board settings, this guide to a corporate governance framework is a useful companion.

Introduction

A common belief is that a conflict exists only when someone has already done something wrong. That's too late. In practice, a conflict can be actual, potential, or perceived.

An actual conflict is the direct one. You're making a decision about a business you own. A potential conflict is one that could arise soon. A new client matter involves a family member's company, even if no decision has been taken yet. A perceived conflict is different again. Even where a person believes they can stay impartial, an outsider may reasonably see a risk to independent judgment.

Those distinctions matter because a weak policy only catches the obvious case. A workable policy catches all three. It treats conflicts the way a good risk framework treats control failures. Early identification is cheaper, cleaner, and easier than fixing a compromised decision after the event.

  • Actual conflict: a direct clash between personal interest and official duty.
  • Potential conflict: a situation that may develop into a direct clash.
  • Perceived conflict: a circumstance that may undermine confidence in impartiality.

The key point is simple. A conflicts of interest policy exists to protect decision quality, not just to punish misconduct.

What Is a Conflict of Interest in an Australian Context

Australia's approach is preventive. The Organisation for Economic Co-operation and Development has stated that preventing and managing conflicts of interest is a core element of public integrity, and that policy logic has shaped Australian integrity settings toward timely disclosure, transparency, and management before a decision is made (OECD guidance on conflict of interest).

That has an important consequence for private groups as well as public bodies. A conflict isn't treated as proof of bad character. It's treated as a governance risk that needs a process. If you run a company, a charity, a family office, a medical practice, or an advisory firm, the practical question isn't “Do we have conflicts?” It's “Can we identify them early and manage them consistently?”

An infographic showing a five-step blueprint for developing a corporate conflicts of interest policy.

The three forms that matter in practice

An actual conflict is usually easiest to recognise. A director has a direct financial interest in a proposed transaction. A trustee votes on a matter affecting a related party. An adviser recommends a structure that benefits an associated lender.

A potential conflict is often where trouble starts. The transaction hasn't happened yet, but the relationship exists. A staff member is about to take a side consulting role with a supplier. A board member's family trust is considering an investment in an entity the board regulates or funds.

A perceived conflict can be the most underestimated. Even where the person believes they can remain fair, the appearance of influence may still damage trust. In governance, perception doesn't replace facts, but it does affect credibility.

Practical rule: If an informed outsider would pause and ask whether the decision-maker is fully independent, treat it as a conflict requiring review.

Why fiduciary thinking matters

Conflicts of interest often sit alongside fiduciary obligations. Directors, trustees, officeholders, and many professionals must act in the interests of the entity or client, not in their own private interests. For readers wanting a plain-language legal explanation of that duty, Coto & Waddington's insights on fiduciary duty offer a helpful conceptual companion.

This is also where organisations commonly confuse disclosure with resolution. Declaring a conflict is necessary, but it doesn't neutralise the risk by itself. The question after disclosure is always the same: can the person continue to participate, and if so, on what conditions?

A practical document should also intersect with other governance settings such as procurement, approvals, delegations, and related party transactions. If those policies sit in isolation, people miss issues that arise across them.

This table shows how the three conflict categories usually appear in Australian organisations.
TypeTypical exampleWhy it matters
ActualA director votes on a contract with their own businessThe risk to impartiality is immediate
PotentialAn employee develops an outside role with a supplierThe conflict may affect future decisions
PerceivedA trustee participates in a matter involving a close family connectionTrust in the decision may be undermined

In Australia, the practical test isn't whether conflicts can be eliminated. It's whether they're surfaced early enough to be assessed and managed properly.

Drafting Your Conflicts of Interest Policy

A policy that works in real life is rarely the shortest one. It is the clearest one. People need to know what must be disclosed, who receives the disclosure, how the issue is assessed, and what management options are available.

The most reliable structure is a three-stage workflow. Verified governance guidance describes this as mandatory disclosure, formal assessment against a risk matrix, and a managed outcome such as recusal, divestment, or role separation. It also stresses that disclosure alone is insufficient, and records should be kept of the disclosure, assessment, and action taken (three-stage COI workflow guidance).

A step-by-step infographic illustrating the six-stage process for drafting a formal conflicts of interest policy.

What the document needs to contain

Below is a practical policy skeleton that I'd expect to see before calling a conflicts of interest policy fit for use.

Core components of a Conflicts of Interest Policy
Policy SectionPurpose and Key Content
PurposeState why the policy exists, usually to protect impartial decision-making, fiduciary standards, and trust.
ScopeIdentify who is covered, such as directors, trustees, employees, contractors, advisers, and committee members.
DefinitionsDefine actual, potential, and perceived conflicts, plus related interests such as family, ownership, gifts, and outside roles.
Disclosure requirementsSet out when and how a person must disclose, including onboarding, annual declarations, and event-based updates.
Assessment processAssign responsibility for review, escalation, documentation, and use of a risk matrix.
Management optionsSpecify responses such as recusal, restricted access, independent oversight, role separation, or prohibition.
RecordkeepingRequire a register and minutes or file notes showing what was disclosed and how it was handled.
Breach consequencesExplain what happens if a person fails to disclose or ignores a management direction.
Review cycleSet the frequency for reviewing the policy and the register against current operations.

How the workflow looks in a real organisation

Take a small advisory firm. A senior adviser's spouse joins a lender that receives referrals from the firm. If the policy only asks for annual declarations, that fact may sit undisclosed for months. By then, recommendations may already be under scrutiny.

A stronger policy would require immediate disclosure, then an internal assessment of whether the adviser can continue dealing with affected clients. The outcome might be that the adviser is removed from lender selection for those files, another adviser reviews recommendations, and the relationship is noted in the register.

Now take an NFP. A committee member's family business tenders for event services. If the policy is vague, people often rely on informal abstention. That's not enough. The file should show the disclosure, the decision on participation, and who approved the arrangement.

  • Purpose first: if staff can't explain why the policy exists, they won't use it well.
  • Triggers matter: outside business interests, gifts and benefits, related-party dealings, and private client relationships should be named.
  • Ownership of the process: someone must be responsible for receiving and assessing disclosures.
  • Records win arguments later: minutes, declarations, and register entries matter when decisions are questioned.

A policy should read like an operating document, not a values poster.

For many businesses, drafting the policy also overlaps with formal governance support, board minutes, registers, and approval trails. That's where disciplined corporate secretarial services can support implementation.

The best conflicts of interest policy is specific enough to guide behaviour on a busy Tuesday, not just defensible in a policy folder.

Sector-Specific Scenarios and Nuances

Different sectors encounter different conflict patterns. The underlying principles stay consistent, but the triggers, records, and consequences vary. That's where generic templates usually fail.

A digital collage depicting professionals in various industries integrating technology and data across a global connection.

Medical practices and allied health

Dr Anya Sharma is a GP in Sydney operating as a sole trader with rooms in Chatswood. She is approached to refer patients needing allied services to a clinic where her sibling holds an ownership interest. The services may be sound, but the referral pathway now presents a conflict question.

A workable response is not to ban all related referrals automatically. It is to document the relationship, assess whether referrals could reasonably be seen as influenced by private interest, and set controls. Those controls may include transparent disclosure within the practice, removing Dr Sharma from any vendor decision affecting that clinic, and retaining records supporting why a referral remains clinically appropriate where relevant.

Worked example. Dr Anya Sharma earns $420,000 from her sole trader medical practice in Chatswood and is considering a lending arrangement through a related finance business that employs a family member. If the relationship isn't disclosed in the practice's governance records and supporting advisory files, the issue may not stay confined to ethics. Verified data states that 28% of tax audits for medical professionals in 2025 were triggered by improperly documented conflicts of interest in third-party advisory or lending arrangements, leading to average disallowances of $45,000 in tax deductions. That point was attributed in the verified material to the Australian Taxation Office for 2025. Depending on the facts, the practical answer may be to map the lending relationship, identify the family connection, document independent decision criteria, and separate any conflicted person from approval.

NFPs and community organisations

In not-for-profits, conflicts often arise through volunteer networks, donor relationships, and mission-driven urgency. A board member may know the “right” supplier, the “right” staff candidate, or the “right” property provider. The problem isn't the relationship itself. The problem is when urgency bypasses governance.

For faith-based and community settings, process discipline is often more valuable than legal language. Readers involved in churches may find the administrative lens in effective church management useful as a reminder that stewardship depends on clear systems, not assumptions.

If your organisation sits in the charity space, conflict controls should align with board minutes, procurement records, and annual declarations. This becomes even more important where committees are informal and members wear multiple hats. For a deeper look at governance expectations in this space, see these not-for-profit audit requirements in Australia.

When a board says, “We all know each other here,” that's usually the moment to tighten the policy.

SMEs, AFSL settings, and family-run structures

Small and medium businesses often carry the highest concentration of unmanaged conflicts because ownership and management are close together. The founder is also the shareholder, the spouse runs payroll, the sibling supplies inventory, and the bookkeeper is a cousin. None of that is automatically improper. It does mean a policy must be suited to related-party realities.

In financial services and advisory settings, the policy needs clear triggers for referral arrangements, external remuneration, private client relationships, and associated entities. Firms that rely on broad ethics clauses usually miss the operational detail required to assess real files.

One issue that deserves more direct treatment is family-member employment in related entities. Verified data provided for this brief states that 41% of new wealth management clients in Australia are unaware that their conflicts of interest policy must explicitly cover family-member employment in related lending entities to avoid tax penalties under the PSD 2024 rules, attributed there to the Financial Services Council in 2025. Even without adopting that figure beyond the verified material, the practical lesson is clear. If family-linked entities appear anywhere in your advice, lending, service chain, or referral chain, the policy should name them expressly.

Chinese enterprises and new migrants

Here, many off-the-shelf policies are least helpful. Chinese business groups and new migrants often arrive with governance habits built around trust, family alignment, and relational decision-making. Those habits may work commercially within a close network, but they can clash with Australian expectations of documented impartiality.

Verified data for this article states that 34% of new foreign-owned entities face compliance delays due to misunderstood organisational conflict clauses involving parent companies in Asia, attributed there to the Australian Securities and Investments Commission. That's a useful warning sign. The issue is often not intent. It is translation between governance cultures.

Common pressure points include:

  • Parent company influence: Australian directors may still need to demonstrate independent judgment even where a parent company expects alignment.
  • Family-connected suppliers: a relationship that feels ordinary inside the group may need formal disclosure and approval.
  • Dual roles across entities: one person may hold positions in both the Australian vehicle and an offshore related entity.
  • Informal instructions: decisions conveyed through relationships rather than formal records are hard to defend later.

For these businesses, the policy should be bilingual where needed, but above all, it should explain examples in plain terms. A declaration form that merely asks “Do you have a conflict?” is far too blunt. It should ask about parent entities, affiliate interests, family ownership, related lending, gifts and benefits, and cross-border reporting lines.

Sector-specific drafting matters because the primary risk is rarely the legal definition. The primary risk is a policy that never captures the conflict patterns your organisation encounters.

How to Implement and Maintain Your Policy

A conflicts of interest policy fails most often at implementation. The document may be fine, but nobody knows when to use it, who receives declarations, or how quickly matters should be assessed.

Effective policies are active. Verified governance benchmarks suggest disclosures should be made immediately when they arise, with straightforward cases assessed within five to ten working days, and annual declarations also commonly required from in-scope personnel (governance timing benchmarks for conflict disclosures). That timing matters because a conflict is usually a live decision problem, not a yearly filing exercise.

An infographic titled How to Implement and Maintain Your Policy with eight numbered steps for organizational compliance.

What implementation looks like in practice

Board approval is only the start. The policy then needs communication, training, forms, registers, and an accountable person or committee. If those pieces are missing, people will either over-report harmless issues or fail to report material ones.

The register matters more than many organisations realise. It becomes the institutional memory for recurring issues, past management decisions, and review dates. Without it, the same conflict gets rediscovered each time the people in the room change.

Questions leaders should ask

  • Who must declare: directors only, or also employees, contractors, advisers, and committee members?
  • What events trigger disclosure: annual renewal alone, or also role changes, new investments, gifts, outside work, and family links?
  • Who assesses the issue: chair, governance lead, compliance function, or independent committee?
  • How is the outcome documented: register entry, board minute, file note, or formal determination?
  • When is the policy reviewed: after business model changes, new services, acquisitions, or governance incidents?

Good implementation depends on repetition. People need examples, not just a PDF.

A useful way to sustain the system is to embed it into onboarding, procurement, annual declarations, board packs, and file reviews. In practice, this sits alongside a broader risk management framework rather than outside it.

If people only remember the policy once a year, the policy isn't functioning as a control. It's functioning as paperwork.

Frequently Asked Questions About Conflicts of Interest

Does a small business really need a conflicts of interest policy?

Yes, often more than a larger organisation does. In small businesses, ownership, family, suppliers, and decision-making are usually closer together. That creates more overlap, not less. The policy may be shorter, but it should still define disclosures, assessment steps, and how related-party decisions are documented.

Is a conflict of interest the same as a conflict of duty?

No. A conflict of interest involves a clash between personal interests and professional or fiduciary responsibilities. A conflict of duty usually involves competing obligations owed to different parties. Directors, trustees, and advisers can face both. Each requires careful analysis, but they aren't the same problem.

Can a disclosed conflict still be allowed?

Yes, depending on the circumstances. Disclosure is the start, not the end. Some conflicts can be managed through recusal, restricted access, independent review, or role separation. Others may be too significant and should be prohibited. The key is that the decision and the reasoning are recorded clearly.

What should a policy say about gifts and benefits?

It should be specific. Vague wording invites inconsistent judgment. The policy should say what must be disclosed, who approves acceptance, when a gift must be declined, and where the record is kept. Gifts and benefits become risky when they sit near procurement, referrals, or regulatory decisions.

What happens if someone fails to disclose?

That depends on the organisation's rules and the sector. Consequences may include internal disciplinary action, removal from a decision, reversal of an approval process, or more serious legal and regulatory issues in regulated environments. The deeper problem is often evidentiary. Once records are poor, it becomes much harder to defend the integrity of the decision.

Should the conflicted person leave the meeting?

Often yes, but not always for every stage. In many cases, the person may disclose the facts, answer factual questions, and then leave while the decision is discussed and determined. What matters is that the policy states the process and the minutes show what occurred.


If you would like clarity on how these principles may apply to your own circumstances, contact Everglow Prosperity on 1300 913 929 or email contact@everglow.au. To book directly: Book a meeting with Panbo.

Want help applying this to your situation?

Every situation is different. Book a time with our team to talk it through, or call us on 1300 913 929.

Book a meetingAustralian tax guide →See our fees →